AMENDMENT 

Please substitute the following claims for the pending claims having the same 
numbers: 



ded) A method for authenticating an electronic payment comprising: 



receiving from a seller an electronic sales draft including an electronic signature; 




receiving from said seller a digital certificate associated with a buyer, said digital 
certificate including a verification key and an encrypted version of a personal 
identification number (PIN); 

using said verification key to verify tha^said electronic signature was authorized 
by said buyer; 

extracting said encrypted version of said PIN from said digital certificate; 

decrypting said encrypted version of said PIN; 

generating, using saicLrIN, an authorization request; 

sending said authorization request to a financial institution; 

receiving aj* ipproval of said authorization request from said financial institution; 
and 

serfding said approval to said seller. 



2/]C) (Omc Amended) A method for authorizing an electronic purchase in a networked 
L computer environment, comprisinfflhe steps of: 

.) receiving, from a mercl^nt, a transaction authorization request including a digital 
certificate passed through said merchant from a user involved in said transaction, 
(i) said digitaT certificate including a financial account datum associated with 
said user, 
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(ii) said digital certificate conveymg^a binding between at least a portion of 

said financial account (Jattfm and a public key of said user; 
verifying said binding^uSmg a cryptographic verification key associated with a 
trusted partypefrorming said binding; and 

using^sda financial account datum to authorize a transaction order digitally 
Signed by said user with a private key corresponding to said publicJpeyT 



(Once?' Amended) A method for providing electronic payment capabilities to a user in a 
etworked computer environment, comprising the steps oj 
(a) obtaining a financial account datum associajeu with said user; 
obtaining a public key associated with^smd user; 

obtaining a cryptographically assured binding of said public key to at least a 
portion of said financial account datum, 

(i) said binding beklg conveyed in a digital certificate for said user, 

(ii) said digitaj^ertificate being usable by said user to conduct an electronic 
transaction involving said financial account datum; and 

(d) transmittifig said digital certificate to said user, enabling said user to conduct said 
electpmiic transaction involving (i) a merchant, and (ii) a transaction processor 

pable of verifying said binding using a cryptographic verification key 
associated with a trusted party performing smd binding. 



'nee Amended) An apparatus for authorjzmg an electronic purchase in a networked 
computer environment, comprising: 

(a) a computer processor; 

(b) a memory connected to ^did processor storing a program to control the operation 
of said processor; 

the processor operable with said program in said memory to: 
(i) receive, from a merchant, a transaction authorization request, said request 
including a digital certificate passed through said merchant from a user 
involved in said transaction, 
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(1) said digital certificate including^kr^icial account datum associated 
with said user, 

(2) said digital certijidite conveying a binding between at least a 
portion oflJaid financial account datum and a public key of said 

v&fty said binding using a cryptographic verification key associated with 
a trusted party performing said binding; and 

use said financial account datum to authorize a transaction order digitally 
signed by said user with a private key corresponding to said publie key. 



(Oj*de Amended) An apparatus for providing electronic payment capabijmes to a user in 
a networked computer environment, comprising: 
(a) a processor; 

a memory connected to said processor storing a prognjrfi to control the operation 
of said processor; 

the processor operable with said program in saj<f memory to: 




(i) obtain a financial account datum regarding said user, 

(ii) obtain a public key associated with said user, 

(iii) obtain a cryptographically^afssured binding of said public key to at least a 
portion of said financial iccount datum, 

(1) said binding being conveyed in a digital certificate for said user, 

(2) said digital certificate being usable by said user to conduct an 
xtronic transaction involving said financial account datum, and 

(iv) transmit said digital certificate to said user, enabling said user to conduct 
Said electronic transaction involving (1) a merchant, and (2) a transaction 
processor capable of verifying said binding using a cryptographic 
verification key associated with a trusted party performing said binding. 



)nce Amended) A computer-reapable storage medium encoded with processing 
^instructions for implementing a method for authorizing an electronic purchase in a 
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networked computer environment, said processing instructiprfs for directing a computer 
to perform the steps of: 

(a) receiving, from a merchant, a transactiop^uthorization request, said request 

including a digital certificate pass^tHhrough said merchant from a user involved 
in said transaction, 

(i) said digital certificate including a financial account datum associated with 
said user, 

(ii) said jjigital certificate conveying a binding between at least a portion of 
financial account datum and a public key of said user; 

veprlying said binding using a cryptographic verification key associated with a 
'trusted party performing said binding; and 

using said financial account datum to authorize a transaction order digitally 
signed by said user with a private key corresponding to said public key. 



Amended) A computer-readable storage medium encoded with precessing 
instructions for implementing a method for providing electronic paynient capabilities to a 
user in a networked computer environment, said processing inductions for directing a 
computer to perform the steps of: 

(a) obtaining a financial account datum regarding^aid user; 

(b) obtaining a public key associated with sam user; 

(c) obtaining a cryptographically assurpd binding of said public key to at least a 
portion of said financial accomrfaatum, 

(i) said binding beingxJonveyed in a digital certificate for said user, 

(ii) said digital certificate being usable by said user to conduct an electronic 
transaction involving said financial account datum; and 

(d) transmitting^gaid digital certificate to said user, enabling said user to conduct said 
electronic transaction involving (i) a merchant, and (ii) a transaction processor 
capable of verifying said binding using a cryptographic verification key 

sociated with a trusted party performing the said binding. ■ 



z 
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^ 46. (Once Amended) A digital certificate for use in an electronic / p4yment transaction in a 
networked computer environment, comprising: 

a financial account datum associated with ^User; 

a cryptographically assured binding ofla public key associated with said user to at 
least a portion of said financial account datum, said binding having been 
generated with a cryptograpluc verification key associated with a trusted party 
performing said bindjtfg; 
(c) said digital certificate configured for use by a transaction processor to: 

(i) verify said binding using a cryptographic verification key associated with 

aid trusted party, and 
(ijf access said financial account datum to authorize a transaction order 

digitally signed with said user's private key corresponding to said public 
key. 




Please add the following new claims: 

TWmethod of claim 2 where at least a portion of said financial account dajtffn is kept 
Confidential from said merchant. 

The method of claim 15 where at least a portion of said fmapdial account datum is kept 
confidential from said merchant. 

51. The method of claim 30 where at least a portipri^of said financial account datum is kept 
confidential from said merchant. 

62. The method of claim 34 where aj/least a portion of said financial account datum is kept 
confidential from said merchant. 



63. The method of clain^S where at least a portion of said financial account datum is kept 
confidential from : said merchant. 
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64. The method of claim 42 where atj^t a portion of said financial account datum is kept 
confidential from said merchant. 

The methodpf^ldm 46 where at least a portion of said financial account datum is kept 
confidefitial from said merchant. 



** Remainder of Page is Blank* 1 ' 
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